diff --git a/.forgejo/workflows/docs.yml b/.forgejo/workflows/docs.yml
index 3e9acf18..79913cd8 100644
--- a/.forgejo/workflows/docs.yml
+++ b/.forgejo/workflows/docs.yml
@@ -11,6 +11,10 @@ on:
       - 'docs/**'
       - 'tools/docgen/**'
       - 'tools/ludic-cli/**'
+      # the site publishes the installer, so a change to it has to redeploy the
+      # site — otherwise a fixed install.sh sits in main while the old one is
+      # still what `curl … | sh` fetches
+      - 'install.sh'
       - '.forgejo/workflows/docs.yml'
   workflow_dispatch: {}
 
diff --git a/changes/docs-deploy-installer.md b/changes/docs-deploy-installer.md
new file mode 100644
index 00000000..be0a0142
--- /dev/null
+++ b/changes/docs-deploy-installer.md
@@ -0,0 +1,6 @@
+bump: patch
+type: ci
+The docs deploy triggers on a change to `install.sh`. The site publishes the
+installer, but the workflow's path filter did not mention it — so a release that
+only fixed `install.sh` left the old script live at the URL the landing page
+tells people to pipe into `sh`.